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accessing the segment using the copy of the decryption key at the user location for the 

segment and a control process, the control process responsive to a user limitation 
to control distribution of the elec tronic information; [and] 
destroying the copy of the decryption kry at the user location [after] in response to said 
. accessing [the segment]; I 

|\ displaying the decrypted segment in re; ponse to said accessing: and 
destroying the decrypted segment in response to said displaying. 



3. (Amended) A method of accessing first and second encrypted segments of an 
electronib4pcument comprising [the steps of]: 

retrievin^-N^ the user location, a first enci^^pted-segffiQnt of the electronic document; 
receiving, from^^^y server, [(a)] a copy of a firs^ decp^ption key for the first segment 





first segment and associated 
ption key for the first 



and [(b)] at leas^s^le user limitation ass 
with the first decry ptiolHc^y; 
accessing the first segment using the cogy of the 
segment; and 

at the user location, destroying the copy of the flrs^d^cryption key for the first segment 

[as a precondition to]; 
receiving a decryption key for accessing a second segment of the^dl^ctronic document 

after said destroying . 

Please ^^dd the follov^ing claims for consideration by the Examiner: 



4. A method of viewing encrypted electroriic information on a display, comprising: 
retrieving, at a user location, a segment of encrypted electronic information; 
receiving, from a remote server, a decryption key for the segment; 
decrypting the segment using the decry ptior key; 

destroying, at the user location, the decryption key in response to said decrypting; 
displaying the segment as decrypted on the display; and 

destroying, at the user location, the segment as decrypted in response to said displaying. 
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The method of claim 4, further comprising providing an encrypted communication 
channel, wherein said receiving occurs over the encrypted communication 
channel. 

p. The method of claim further comprising entering user identification information, 
said receiving being responsive to said user identification information 
representing at least one of an authorized user and authorized conditions. 

y / 

/. The method of claim 4, further comprising limiting access to the segment at the user 
location consistent with predetermined criteria associated with at least one of the 
segment and user identification information. 

associated with the segment and user identification information. 

!• ^ 

J9, The method of claim >f, further comprising destroying, at the remote server, the 
decryption key. 

^- 

yS. A method of encrypting information, comprising: 

providing, at a user location, electronic information having at least one segment; 
receiving, from a remote server, an encryption key for a segment of said at least one 

segment, the encryption key being associated with a decryption key; 
associating at least one access precondition with the decryption key; 
encrypting the segment with the encryption key; 

destroying, at the user location, the encryption key and any unencrypted versions of said 
segment in response to said encrypting. 
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yi . The method of claim j^, further comprising performing said receiving, said 



associating, said encrypting, and said destroying for each of the at least one 
segment. 

Ih '\ 

The method of claim yf, further comprising communicating the at least one access 
precondition to the remote server. 

The method of claim IZ, further comprising performing said receiving, said 

associating, said encrypting, said communicating, and said destroying for each of 
the at least one segment. 

yS- 9 

jX. The method of claim iX said associating further comprising associating with the 

decryption key at least one of an authenticated user, a group name, time, date, day 
of week, and network address access precondition. 

rS. A method for limiting access to information, comprising: 

generating, at a server, first and second encryption keys and associated first and second 

dem^ption keys, respectively^"'" \ 
first sending tne^Jirst decryption key ams^location; 

second sending the^second decryption key to the user location after destruction, at the 
user location, orti^ first decryptioijj^^. 

16. The method of claim 15, furmer comprising: 
receiving user identification informatioli: 

each of said first and second sending being "fcqntingent upon said user identification 
information representing an authorized uW^ under authorized conditions. 

17. The method of claim 15, further comprising recordin^ach instance of said first and 

second sending. 



